Preserving state information client-server system networked via a stateless protocol

Abstract

A method performed by a server for maintaining state in a stateless server environment is includes receiving a request for performance of an operation by an application from a client wherein the request includes a first universal resource locator (URL). A first set of state information may be extracted from the first URL, if any is present, and evaluated. A second set of state information associated with the operation is assembled, and the second set of state information contains at least the client identification information, the application information, and a counter. The counter keeps track of how many times the client has interacted with the server for the operation. The second set of state information is incorporated into a second URL.

Description

CROSS REFERENCE TO RELATED APPLICATION[0001]This application is a continuation of and claims the benefit of and priority to U.S. Provisional Patent Application No. 61 / 012,244, filed Dec. 7, 2007, entitled PRESERVING STATE INFORMATION CLIENT-SERVER SYSTEM NETWORKED VIA A STATELESS PROTOCOL, which document is hereby incorporated by reference to the extent permitted by law.BACKGROUND OF THE INVENTION[0002]1. Field of the Invention[0003]This invention is related to computers and computer networks. In particular, the invention is related to computers preserving state while communicating over networks.[0004]2. Description of Related Art[0005]Network protocols provide standard methods for machines to communicate with one another. The protocols indicate how data should be formatted for receipt and transmission across networks. Heterogeneous machines can communicate seamlessly over a network via standard protocols.[0006]A client and server may communicate either synchronously or asynchronous...

AI Technical Summary

Benefits of technology

[0019]The present invention opts to leverage the concept of URL re-writing to implement the session management technique described, though cookies may also be used. URL re-writing does not hinge on the client machine behaving in accordance with assumptions that the application expects to be fulfilled. Instead, the application is assured that each successive interaction will contain tokens that the application has set by mutating the possible inputs with the tokens it needs as it sends a response to the user. The session token is a unique identifier that is generated and sent from a server to a client to identify the current interaction session. The present invention allows the client to store and send the token as a part of the URL string.

[0020]By working with the discrete state changes, the mechanism is quick enough to allow for secure persistence of state, and also provide provisions for a rewinding/rollback as need be. An example of a renewing scenario is when a user chooses to use a back bu

Problems solved by technology

For these types of interactions, the statelessness of protocols can present problems.

For these types of interactions, the statelessness of protocols can present problems.

Although cookies can help maintain some information, cookies cannot be relied upon to support applications accessed via stateless protocols, sessions associated with the applications, and resources associated with such applications and sessions, since users may reject cookies (e.g. for security and/or privacy reasons), and/o

Images